<!doctype html>
<html class="no-js" lang="">

<head>
    <meta charset="utf-8">
    <meta http-equiv="x-ua-compatible" content="ie=edge">
    <title>模拟网易云</title>
    <meta name="description" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="stylesheet" href="https://hoppinzq.com/wyy/static/css/bootstrap.min.css">
    <link rel="stylesheet" href="https://hoppinzq.com/wyy/static/css/fontawesome-all.min.css">
    <link rel="stylesheet" href="https://hoppinzq.com/wyy/static/css/flaticon.css">
    <link href="https://hoppinzq.com/wyy/static/css/css.css" rel="stylesheet">
    <link rel="stylesheet" href="https://hoppinzq.com/wyy/static/css/style.css">
	<link rel="stylesheet" href="https://hoppinzq.com/zui/static/iframe/jbox/dist/jBox.all.css">
    <link rel="stylesheet" href="https://hoppinzq.com/wyy/static/css/main1.css">
</head>

<body>
    <div id="preloader" class="preloader">
        <div class='inner'>
            <div class='line1'></div>
            <div class='line2'></div>
            <div class='line3'></div>
        </div>
    </div>
    <section class="fxt-template-animation fxt-template-layout34">
        <div class="fxt-shape">
            <div class="fxt-transformX-L-50 fxt-transition-delay-1">
                <img src="https://hoppinzq.com/wyy/static/picture/shape1.png" alt="Shape">
            </div>
        </div>
        <div class="container">
            <div class="row">
                <div class="col-lg-8">
                    <div class="fxt-column-wrap justify-content-between">
                        <div class="fxt-animated-img">
                            <div class="fxt-transformX-L-50 fxt-transition-delay-10"></div>
                        </div>
                        <div class="fxt-transformX-L-50 fxt-transition-delay-3">
                            <a href="" class="fxt-logo"><img src="https://hoppinzq.com/static/images/logo/1640338711_113639.png" alt="Logo"></a>
                        </div>
                        <div class="fxt-transformX-L-50 fxt-transition-delay-5">
                            <div class="fxt-middle-content">
                                <h1 class="fxt-main-title">音楽的力量</h1>
                                <div class="fxt-switcher-description1">
									<p class="font-blod">前言：相信大家都对昨天QQ盗号事件有所耳闻，甚至有人是victim。流传的原因有两个：</p>
								 <div class="col-12">                       
									 <p class="text-muted">
										 1、学习通用户数据泄露，使用学习通密码撞库（QQ密码与学习通密码一致）。
									 </p>
									 <p class="text-muted">
										 2、钓鱼网站伪造了一个LOL活动，受害者通过QQ扫描该网站提供的二维码登录并参与活动。
									 </p>
									
								 </div>
								 <p class="font-blod">
									 但是，无论哪种手段原理都是一样的，即：跨站点伪造请求（CSRF）。该攻击手段非常简单，也不好预防。
								 </p>
								 <p class="font-blod">最常见的是上面的2号原因的情形，还有steam或者QQ点击不明链接导致“盗号”或者“盗库存”。
								 那么何为CSRF攻击？我觉得你可以先被我小小的攻击一下。</p>
								 <div class="col-12">
									 <p class="text-muted">
										 扫描右方的二维码，或者用网易云音乐APP扫描即可。千万不要多次试错登录（故意输错），以免您的IP或者账号被我风控
									 </p>
                                     <p class="text-muted">
                                         浅尝辄止即可，本页面所有请求都没做缓存（因为要刷这该死的二维码）而且都是打在我的服务器上，
                                         全部由我的服务器试图向网易云发起请求，容易因为IP超频导致我的服务器被网易云风控
                                     </p>
								 </div>
								 
								 <a href="javascript:void(0)" class="fxt-switcher-text ms-2 text-success">本来想直接盗steam的，但是还是网易云受众广泛，steam原理同且更简单。</a>
								 </div>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="col-lg-4">
                    <div class="fxt-column-wrap justify-content-center">
						<div class="fxt-transformX-L-50 fxt-transition-delay-7 text-center">
							<div class="text-center">
							    通过网易云APP扫描二维码，或者以网易云邮箱/密码、手机号/密码、手机号/md5标记的密码、手机号/短信验证码开始操作
							</div>
						    <div class="fxt-qr-code">
						        <img src="https://hoppinzq.com/wyy/static/picture/qr-login-34.png" id="qr_img" alt="QR">
								<a href="javascript:void(0)" class="fxt-switcher-text ms-2 text-success" id="reload_qr">刷新二维码</a>
						    </div>
							
						</div>
                        <div class="fxt-form" id="user_method1">
                            <div>
                                <div class="form-group">
                                    <input type="text" id="emailOrPhome" class="form-control" placeholder="输入网易云邮箱或者手机号" required="required">
                                </div>
                                <div class="form-group">
                                    <input id="password" type="password" class="form-control" placeholder="********" required="required">
                                    <i toggle="#password" class="fa fa-fw fa-eye toggle-password field-icon"></i>
                                </div>
                                <div class="form-group">
                                    <div class="fxt-switcher-description2 text-right">
                                        <a href="javascript:void(0)" class="fxt-switcher-text change_login_type">手机验证码登录</a>
                                    </div>
                                </div>
                                <div class="form-group">
                                    <button type="btn" class="fxt-btn-fill" id="login_normal">登录</button>
                                </div>
                            </div>
                        </div>
                        <div class="fxt-form display-none" id="user_method2">
                            <div id="otp-form">
								<div class="form-group">
								    <input type="text" id="phone" class="form-control" placeholder="输入手机号" required="required">
								</div>
								<div class="fxt-otp-btn">
								    <button type="btn" class="fxt-btn-fill" id="mobile_code">发送验证码</button>
								</div>
								<div class="form-group">
								    <div class="fxt-switcher-description2 text-right">
								        <a href="javascript:void(0)" class="fxt-switcher-text change_login_type">账号密码登录</a>
								    </div>
								</div>
                                 <label class="fxt-label">输入手机验证码，有效期10分钟</label>
                                <div class="fxt-otp-row" id="mobile_code_4">
                                    <input type="text" class="fxt-otp-col otp-input form-control" maxlength="1" required="required">
                                    <input type="text" class="fxt-otp-col otp-input form-control" maxlength="1" required="required">
                                    <input type="text" class="fxt-otp-col otp-input form-control" maxlength="1" required="required">
                                    <input type="text" class="fxt-otp-col otp-input form-control" maxlength="1" required="required">
                                </div>
                                <div class="fxt-otp-btn">
                                    <button type="btn" class="fxt-btn-fill" id="check_mobile_code">验证</button>
                                </div>
                            </div>
                            <div class="fxt-switcher-description3">没有收到验证码?<a href="login-34.html" class="fxt-switcher-text ms-1 text-success">重新发送</a></div>
                        </div>
						<div class="fxt-style-line">
                            <span>或者通过zauth</span>
                        </div>
                        <ul class="fxt-socials">
                            <li class="fxt-zauth">
                                <a href="#" title="zauth"><i class="fab fa-angellist text-success"></i></a>
                            </li>
                        </ul>
                    </div>
                </div>
            </div>
        </div>
		<div id="waitGetState" class="target-click" style="display: none;">点我</div>
    </section>
    <script src="https://hoppinzq.com/wyy/static/js/jquery-3.5.0.min.js"></script>
	<script src="https://hoppinzq.com/zui/static/iframe/jbox/dist/jBox.all.js"></script>
	<script src="https://hoppinzq.com/static/js/plugins/buttonLoading.js"></script>
    <script src="https://hoppinzq.com/wyy/static/js/bootstrap.min.js"></script>
    <script src="https://hoppinzq.com/wyy/static/js/imagesloaded.pkgd.min.js"></script>
    <script src="https://hoppinzq.com/wyy/static/js/validator.min.js"></script>
    <script src="https://hoppinzq.com/wyy/static/js/main.js"></script>
    <script src="https://hoppinzq.com/wyy/static/js/main1.js"></script>
</body>
</html>